Amendments to the Specification: 



On page 8, please amend the number reference in the portion of the last paragraph as follows: 

When the mobile node moves at 22 from one visited network to another, for 
example, from the visited network 6 to the visited network 9, the mobile node 4 
recognises that its location has changed, for example, from an incoming agent 
advertisement. It then configures a new Care-of address that is routable within the 
new visited network ^ 9. The mobile node 4 contains VPN client software that 
responds to the change in mobile node location, for example, in response to 
network selection middleware or by monitoring the source addresses of outbound 
packets. The VPN client software then changes dynamically the inbound security 
association on the mobile node 4 so that its destination address is the new Care-of 
address of the mobile node, the inbound IPsec tunnel 21 becoming a temporary 
inbound IPsec tunnel 23. In this way the mobile node 4 will be able to receive 
packets securely sent by the VFN gateway 2 to its new Care-of address; otherwise 
the packets would be dropped as they would not match the destination address 
included in the former inbound IPsec tunnel 21. Similarly the VPN client software 
changes dynamically the outbound security association on the mobile node 4, so 
that its source address is the new Care-of address of the mobile node, the 
outbound IPsec tunnel 20 becoming an outbound IPsec tunnel 20'; otherwise the 
mobile node 4 would not be able to send outgoing packets as they would not 
match the source address included in the former outbound IPsec tunnel 20. 
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On page 10, please amend the number reference in the portion of the last paragraph as follows: 

Figure 4 illustrates the routines followed by the home agent 5 during the 
above process. The routine begins at 28 and at step 29 an Input is received in the 
form of a registration request from the mobile node 34 4. A check is made at step 30 
whether the registration request is valid, and if the home agent 5 does not accept 
the registration, the routine terminates at 3 1 . If the home agent 5 does accept the 
registration request, a check is made at 32 whether the registration request was 
received through a VPN gateway such as 2. If it was not, a registration reply is 
built and sent directly to the mobile node 4 over the private network 1 at step 33. If 
the registration request was received through a VPN gateway such as 2, a 
registration reply for the mobile node 4 is built at 34. This registration reply is then 
included in a new packet generated by the home agent 5 at 35 and which also 
contains the former Care -of address and the new Care -of address of the mobile 
node 4. That packet is then sent at step 36 to the VPN gateway 2 and the routine 
terminates again at 3 1 . 



On page 6, please delete the Summary of the invention as follows: 

S ummary of the inventi on 

The present invention provides a method of and apparatus for 
communication as described in the accompanying claims. 
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